considering that similary configured IPv4 peering works. I tried to configure peering between loopbacks, neighbor's state keeps on "idle". Tried with linklocal adresses on physical interfaces, neighbor's state keeps on "active". It's ok with routes, routes to the loopbacks advertised via OSPF, routers can ping each other. I can't find where's the problem? Can anyone send working example of dual-stack iBGP peering? Here is the config of one of ASR's   interface Loopback254 ipv4 address 10.1.254.4 255.255.255.255 interface Loopback6 ipv6 address 2a00:dac0::1/128 router bgp 197765 bgp log neighbor changes detail bgp bestpath med always address-family ipv4 unicast network 31.13.128.0/21 ! address-family ipv6 unicast network 2a00:dac0::/32 ! ################################################# ### This is IPv4 peering, and it work perfect: neighbor-group iBGP remote-as 197765 update-source Loopback254 address-family ipv4 unicast next-hop-self ! ! neighbor 10.1.254.3 use neighbor-group iBGP description DC-ASR-2 address-family ipv4 unicast route-policy ASR2_IN in route-policy iBGP_OUT_DENY_DEFAULT out ! ################################################### ### This is IPv6 peering, and neighbor stays "idle": neighbor-group iBGP_IPv6 remote-as 197765 update-source Loopback6 address-family ipv6 unicast next-hop-self ! neighbor 2a00:dac0::2 use neighbor-group iBGP_IPv6 description DC-ASR-2 address-family ipv6 unicast route-policy ASR2_IPv6_IN in route-policy iBGP_IPv6_OUT_DENY_DEFAULT out ! ... View more

Can't establish IPv6 iBGP peering between two ASR9000 considering that similary configured IPv4 peering works. I tried to configure peering between loopbacks, neighbor's state keeps on "idle". Tried with linklocal adresses on physical interfaces, neighbor's state keeps on "active". It's ok with routes, routes advertised with OSPF, routers can ping each other. I can't find where's the problem? Can anyone send working example of dual-stack iBGP peering? Here is the config of one of ASR's   interface Loopback254 ipv4 address 10.1.254.4 255.255.255.255 interface Loopback6 ipv6 address 2a00:dac0::1/128 router bgp 197765 bgp log neighbor changes detail bgp bestpath med always address-family ipv4 unicast network 31.13.128.0/21 ! address-family ipv6 unicast network 2a00:dac0::/32 ! ################################################# ### This is IPv4 peering, and it work perfect: neighbor-group iBGP remote-as 197765 update-source Loopback254 address-family ipv4 unicast next-hop-self ! ! neighbor 10.1.254.3 use neighbor-group iBGP description DC-ASR-2 address-family ipv4 unicast route-policy ASR2_IN in route-policy iBGP_OUT_DENY_DEFAULT out ! ################################################### ### This is IPv6 peering, and neighbor stays "idle": neighbor-group iBGP_IPv6 remote-as 197765 update-source Loopback6 address-family ipv6 unicast next-hop-self ! neighbor 2a00:dac0::2 use neighbor-group iBGP_IPv6 description DC-ASR-2 address-family ipv6 unicast route-policy ASR2_IPv6_IN in route-policy iBGP_IPv6_OUT_DENY_DEFAULT out !   ... View more

 Добрый день, коллеги Пытаюсь поднять Ipsec на ASR9006, но пока ничего не получается. В чем может быть проблема. Вот конфиг: vrf vrf_client address-family ipv4 unicast import route-target 444:444 ! export route-target 444:444 ! ! ! ipv4 access-list acl_client 10 permit ipv4 x.x.3.10/31 x.x.3.11/31 ! interface Loopback8 description client_ipsec_tunnel_source ipv4 address x.x.129.228 255.255.255.255 ! interface tunnel-ipsec8 vrf vrf_client ipv4 address x.x.3.10 255.255.255.254 profile prof_client tunnel source Loopback8 tunnel destination y.y.192.38 ! crypto isakmp peer address y.y.192.38 vrf default description client_site ! crypto isakmp crypto isakmp policy 1 authentication pre-share encryption aes lifetime 3600 ! crypto isakmp policy 2 authentication pre-share hash md5 encryption aes lifetime 3600 ! crypto keyring keyring_client vrf default pre-shared-key address y.y.192.38 255.255.255.255 key secret_key ! crypto logging tunnel-status crypto isakmp profile isa_prof_client keyring keyring_client match identity address y.y.192.38/32 vrf default ! ! crypto isakmp profile local isa_prof_client_local match identity address y.y.192.38/32 vrf default set interface tunnel-ipsec8 ! ! crypto isakmp keepalive 3600 2 crypto ipsec transform-set ts_client transform esp-aes mode tunnel ! crypto ipsec profile prof_client description ipsec_profile_for_client set pfs group1 match acl_client transform-set ts_client ! crypto ipsec security-association lifetime seconds 3600 Я уже начал думать, поддерживается ли Ipsec на asr? ... View more